Re: can't block delete permissions

From: Eachus (Eachus_at_discussions.microsoft.com)
Date: 07/02/04 

Date: Fri, 2 Jul 2004 09:07:02 -0700

Thanks for the suggestions. I tried this, and got the same result. It did have the effect of re-confirming that the deletions were being run under the permissions of the user in question, which was useful.

The goal here is to be able to block anybody, including programming team members, from being able to delete records in the production database's audit table.

Got any other suggestions where she might be getting delete permissions that override the explicit denial?

"Hari" wrote:

> Hi,
>
> Check the role associated for the user first by executing below command:-
>
> sp_helplogins <Login_name_for that _user'
>
> If you have any roles apart from db_datareader and db_datawriter revoke
> that.
>
> After this Execute the below command
>
> use <dbname>
> go
> deny delete on <table_name> to <user_name>
>
> After that login to query analyzer using that user and run the command:-
>
> select suser_sname()
>
> Now execute the delete statatement on that table.
>
>

Relevant Pages

  • Solaris 10 autofs directory permissions - Solution
    ... the fact that my map file has 755 permissions not 644. ... If the execute permission is set, it becomes an executable map which is ... map is expected to return the content of an automounter map ...
    (SunManagers)
  • Re: Rights to execute jobs?
    ... Does anyone know if the rules surrounding stored procedure permissions apply ... Does this apply to a proc calling sp_start_job so that I ... raise the alert, so it could be anyone on the server. ... is that a group needs to not be an admin but still be able to execute ...
    (microsoft.public.sqlserver.security)
  • Re: Who buys/uses BASIC?
    ... I am talking about file permissions. ... It is possible to have execute permission without read. ... this with a script, because the script must be readable ... As far as I know, an interpreted bytecoded program is a script, from the point ...
    (comp.lang.basic.misc)
  • Re: Newbie
    ... I will now tell you some basic commands. ... Easy file has rights and a owner. ... file and who may execute it. ... The last three characters are about the permissions of user ...
    (alt.linux)
  • Re: Execute Persmission denied on object sp_OACreate
    ... SQL Server doesn't check permissions on indirectly referenced objects as ... You can prevent ad-hoc execution of powerful master database procs while ... >I have a user who has execute permissions on a store procedure in a>database> which in turns executes 4 stored procedures in the master database. ...
    (microsoft.public.sqlserver.security)